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Abstract 

We extend work of Swinnerton-Dyer on the density of the number of 
twists of a given elliptic curve that have 2-Selmer group of a particular 
rank. 

1 Introduction 

Let Ci,C2,C3 be distinct rational numbers. Let E be the elliptic curve denned 
by the equation 

y 2 = (x - d)(x - c 2 )(x - c 3 ). 

We make the additional technical assumption that none of the — Cj)(ci — Ck) 
are squares. This is equivalent to saying that E is an elliptic curve over Q with 
complete 2-torsion and no cyclic subgroup of order 4 defined over Q. For b a 
square-free number, let Eb be the twist defined by the equation 

y 2 = (x - bci)(x - bc 2 )(x - bc 3 ). 

Let S be a finite set of places of Q including 2, oo and all of the places at which 
E has bad reduction. Let D be a positive integer divisible by 8 and by the 
primes in S. Let S2(Eb) denote the 2-Selmer group of the curve Et,. We will 
be interested in how the rank varies with b and in particular in the asymptotic 
density of &'s so that S2(Et) has a given rank. 

The parity of dim^S^-Ef,)) depends only on the class of b as an element of 
FLes Q-t/i^t) 2 - We claim that for exactly half of these values this dimension 
is odd and exactly half of the time it is even. 

Lemma 1. For exactly half of the classes c in (Z/£>)* / ((Z/D)*) 2 , if we pick b 
a positive representative of the class c then dmi(S2(Ei,)) is even. 



We put off the proof of this statement until Section 0] 

Let b = P1P2 ■ ■ -Pn where pi are distinct primes relatively prime to D. In 
[BJ the rank of ^(-E*) is shown to depend only on the images of the pi in 
(Z/D)*/((Z/_D)*) 2 and upon which pi are quadratic residues modulo which pj. 

There are 2™' ' +(;) possible sets of values for these. Let TT d (n) be the fraction 
of this set of possibilities that cause £2 (-Eh) to have rank exactly d. Then the 
main Theorem of [BJ together with Lemma [1] implies that: 

Theorem 2. 

lim n d (n) = a d . 

n— >-oo 

where a = oc\ = and a n+2 = ri" 1 (2i-i?[[ oc (i+2-j) ■ 

The actual Theorem proved in [BJ says that if, in addition, the class of b in 
11,/es Q ; */(Q;*) 2 i s fixed, then the analogous nd(n) either converge to 2a d for d 
even and for d odd, or to 2a d for d odd and for d even. 

This tells us information about the asymptotic density of twists of E whose 
2-Sclmcr group has a particular rank. Unfortunately, this asymptotic density 
is taken in a somewhat awkward way by letting the number of primes dividing 
b go to infinity. In this paper, we prove the following more natural version of 
Theorem [2] 

Theorem 3. Let E be an elliptic curve over Q with full 2-torsion defined over 
Q so that in addition for E we have that 

lim 7r rf (n) = a d . 

n— >oo 

With a d as given in Theorem^ Then 

#{b<N:b square-free, (b, D) = 1 and dim{S 2 (E b )) = d} _ ^ 
N^foa #{b < N : b square-free and (6, D) — 1} 

Applying this to twists of E by divisors of D and noting that twists by 
squares do not affect the Selmer rank we have that 



#{6 < N : dim(5 2 (S h )) = d} 
inn = a d . 

N-*oo N 



Corollary 4. 

and 
Corollary 5. 

< b < N : dim(5 2 (^6)) = d} 
lim = a d . 

N^oo 2N 

Our technique is fairly straightforward. Our goal will be to prove that the 
average moments of the size of the Selmer groups will be as expected. As it turns 
out, this will be enough to determine the probability of seeing a given rank. In 
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order to analyze the Selmer groups we follow the method described in [5] . Here 
the 2-Selmer group of Eb can be expressed as the intersection of two Lagrangian 
subspaces, U and W, of a particular symplectic space, V, over F 2 . Although 
U, V and W all depend on b, once the number of primes dividing b has been 
fixed along with its congruence class modulo D, these spaces can all be written 
conveniently in terms of the primes, pi, dividing b, which we think of as formal 
variables. Using the formula |Z7nW| = J2 u <eu w<£\v(~ ■'■)" W ■> we re duce our 
problem to bounding the size of the "characters" {—l) u ' w when averaged over b. 
These "characters" turn out to be products of Dirichlet characters of the Pi and 
Legendre symbols of pairs of the pi . The bulk of our analytic work is in proving 
these bounds. These bounds will allow us to discount the contribution from 
most of the terms in our sum (in particular the ones in which Legendre symbols 
show up in a non-trivial way), and allow us to show that the average of the 
remaining terms is roughly what should be expected from Swinnerton-Dyer's 
result. 

We should point out the connections between our work and that of Heath- 
Brown in [2] where he proves our main result for the particular curve 

2 3 

y = x — x. 

We employ techniques similar to those of [2], but the algebra behind them is 
organized significantly differently. Heath-Brown's overall strategy is again to 
compute the average sizes of moments of \S2(Eb)\ and use these to get at the 
ranks. He computes \S2{Eb)\ using a different formula than ours. Essentially 
what he does is use some tricks specific to his curve to deal with the conditions 
relating to primes dividing D, and instead of considering each prime individually, 
he groups them based on how they occur in u and w. He lets Di be the product 
of all primes dividing b that relate in a particular way (indexed by i). He then 
gets a formula for \S2(Eb)\ that's a sum over ways of writing & as a product, 
b = Y\ Di , of some term again involving characters of the Di and Legendre 
symbols. Using techniques similar to ours he shows that terms in this sum where 
the Legendre symbols have a non-negligible contribution (are not all trivial due 
to one of the Di being 1) can be ignored. He then uses some algebra to show 
that the average of the remaining terms is the desired value. This step differs 
from our technique where we merely make use of Swinnerton-Dyer's result to 
compute our average. Essentially we show that the algebra and the analysis 
for this problem can be done separately and use [6] to take care of the algebra. 
Finally, Heath-Brown uses some techniques from linear algebra to show that the 
moment bounds imply the correct densities of ranks, while we use techniques 
from complex analysis. 

In Section[2j we introduce some basic concepts that will be used throughout. 
In Section|3l we will prove the necessary character bounds. We use these bounds 
in Section |4] to establish the average moments of the size of the Selmer groups. 
Finally, in Section[5j we explain how these results can be used to prove our main 
Theorem. 
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2 Preliminaries 



2.1 Asymptotic Notation 

Throughout the rest of this paper we will make extensive use of O, and similar 
asymptotic notation. In our notation, 0(X) will denote a quantity that is at 
most H ■ X for some absolute constant H. If we need asymptotic notation that 
depends on some parameters, we will use Qi b jC (X) to denote a quantity that is 
at most H (a, 6, c) • X, where H is some function depending only on a, b and c. 



2.2 Number of Prime Divisors 

In order to make use of Swinnerton-Dyer's result, we will need to consider twists 
of E by integers b < N with a specific number of prime divisors. For an integer 
m, we let u(m) be the number of prime divisors of m. In our analysis, we will 
need to have estimates on the number of of such b with a particular number of 
prime divisors. We define 

II n (iV) = #{primes p < N so that ui(p) = n}. 

In order to deal with this we use Lemma A of [1] which states: 

Lemma 6. There exist absolute constants C and K so that for any v and x 

nVfiw < - — i-t = . 

log (a;) v\ 
By maximizing the above in terms of v it is easy to see that 
Corollary 7. 

f N \ 

n n (iv) = o 



Vloglog(JV) 



It is also easy to see from the above that most integers of size roughly ./V 
have about loglog(A r ) prime factors. In particular: 

Corollary 8. There is a constant c > so that for all N, the number of b < N 
with \u>(b) - loglog(7V)| > loglog(iV) 3/4 is at most 



2N exp ( -c y/log \og(N) 



In particular, the fraction ofb< N with \to(b) — loglog(iV)| < loglog(TV) 3 / 4 goes 
to 1 as N goes to infinity. 

We will use Corollary [8] to restrict our attention only to twists by b with an 
appropriate number of prime divisors. 
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3 Character Bounds 



Our main purpose in this section will be to prove the following Propositions: 

Proposition 9. Fix positive integers D,n,N with 4\D, log log N > 1, and 
(log log AT) /2 < n < 2 log log iV, and let c > be a real number. Let dij,ei t j € 



Z/2 for i,j = 1, . . . ,n with e^j = ej.i,dij — dj t i, e,-^ = d^j = for all Let 



Xi be a quadratic character with modulus dividing D for i — 1, ,..,n. Let m be 
the number of indices i so that at least one of the following hold: 



• e 



= 1 for some j or 



• Xi has modulus not dividing 4 or 

• Xi has modulus exactly 4 and dij = for all j . 



Let e(p) = (p - l)/2. Then if m > 



i{pi)e{pi)di,. 



PlviPn 
distinct primes 



i<j 



Pj 



O c , D (Nc r ' 



(1) 



Note that m is the number of indices i so that no matter how we fix the 
values of pj for the j ^ i that the summand on the left hand side of Equation 
Q] still depends on pi. 

The sum can be thought of as a sum over all b = YiiPi with uj{b) — n and 
b < N, where the summand is a "character" defined by the Xit di,j an d e i,j- The 

accounts for the different possible reorderings of the Pi. This Proposition will 
allow us to show that the "characters" in which the Legendre symbols make a 
non-trivial appearance add a negligible contribution to our moments. 

Proposition 10. Let n,N,D be positive integers with loglogiV > 1, and 
(loglogJV)/2 < n < 21oglogiV. Let G = ((Z/_D)*/((Z/£))*) 2 )". Let f : G -> C 
be a function with \f\oo ^ !• Then 



- y 

distinct primes 
(D, Pi ) = l 

YliPi< N 



f(pi,...,Pn) 



(2) 




1 y 



distinct primes 



(x»,pO=i 



o D 



/ jV(logloglogiV) ' 
V log log 
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(Above /(pi, . . . ,p n ) i s really f applied to the vector of their reductions modulo 
D)- 

Note that again, the sum can be thought of as a sum over all b — Y[i Pi with 
b < N and lo(o) — n. This Proposition says that the average of / over such 
b = Y\ i pi is roughly equal to the average of / over G. This will allow us to show 
that the average value of the remaining terms in our moment calculation equal 
what we would expect given Swinnerton-Dyer's result. 

We begin with a Proposition that gives a more precise form of Proposition 
[S]in the case when the ejj are all 0. 

Proposition 11. Let D,n,N be integers with 4\D with log log N > 1. Let C > 
be a real number. Let di t j € Z/2 for i,j — 1, . . . ,n with di t j — djj, da = 0. 
Let Xi be a quadratic character of modulus dividing D for i = 1, . . . , n. Suppose 
that no Dirichlet character of modulus dividing D has an associated Siegel zero 
larger than 1 — /J . Let 



(C+2)/31oglogA^ e /f(C+2) 2 (logD) 2 (loglog(D7V)) i 



,nlog c+2 (iV)) 



B = max(e 

for K a sufficiently large absolute constant. Suppose that B n < \/~N . Let m be 
the number of indices i so that either: 

• Xi does not have modulus dividing 4 or 

• Xi has modulus exactly 4 and dij = for all j. 



The 



n 



1 



i<j 



distinct primes 
(D, Pi ) = l 
U l P t <N 



(3) 



O 



N 



Vloglog(TV) 




log log B 



0(log N)~ 



Note once again that m is the number of i so that if the values of pj for j =/= i 
are all fixed, the resulting summand will still depend on pi. 

The basic idea of the proof will be by induction on m. If m = 0, we can 
bound by the number of terms in our sum, giving a bound of II„ ( N) , which we 
bound using Corollary [71 If m > 0, there is some pi so that no matter how we 
set the other pj 7 our character still depends on pi. We split into cases based on 
whether Pi > B. If pi > B, we fix the values of the other pj, and use bounds on 
character sums. For pi < B, we note that this happens for only about a log B 
fraction of the terms in our sum, and for each possible value of pi inductively 
bound the remaining sum. To deal with the first case we prove the following 
Lemma: 



G 



Lemma 12. Let K be a sufficiently large constant. Take \ o,ny non-trivial 
Dirichlet character of modulus at most D and with no Siegel zero more than 
1 — ft , N,C > integers, and X any integer with 



X > max ( e (C+ 2 )/ 31 og 1 °g jV je ^(C r +2) 2 (logD) 2 (loglog(DW)) 2 - ) 



Then 



£x(p) 

p<X 



<0(X\og- c - 2 (N)). 



Where the sum above is over primes p less than or equal to X . 

Proof. [?] Theorem 5.27 implies that for any X that for some constant c > 0, 



£ X (n)A(n) =YO (y-^+exp ( "^g^ j (log^) 4 j . 

Note that the contribution to the above coming from n a power of a prime is 
O(VY). Using Abel summation to reduce this to a sum over p of xip) rather 
than xip) l°g(p)j we nncl that 



^ Xip) < XO (x-^+exp (l 0gD ?) +0(VX) 



p<X 



The former term is sufficiently small since by assumption X > e < ' C+2 ^ logl ° sN . 
The latter term is small enough since X > e K(C+2f(io S D) 2 (io g lo S (DN))\ The 1&gt 

term is small enough since clearly X > log 2C+4 (A^). □ 

For positive integers n, N, D, and S a set of prime numbers, denote by 
Q(n, N, D,k, S) the maximum possible absolute value of a sum of the form 
given in Equation [3] with m > k, with the added restriction that none of the pi 
lie in S. In particular a sum of the form 

' Plj»*»Pn i l<j 

distinct primes 

(-D,p 4 )=l 

YliPi<N 

where Xi are characters of modulus dividing D, and dij £ {0, 1}. 
We write the inductive step for our main bound as follows: 

Lemma 13. For integers, n, D, N, M, C and B with 

B > max(e( c+2 ^ lo s lo s M , e K ^ c+2 ^^ ^(DM)f ^ n bg c+2 {M) ) ^ 
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where 1 — is the largest Siegel zero of a Dirichlet character of modulus 
dividing D and K a sufficiently large constant, 1 < k < n and S a set of primes 
< B, then Q(n, N, D,k, S) as described above is at most 

0(Nlog(N) \og~ c - 2 (M)) + -VQ(n-l, N/p, D,k-l,SU {p}). 

n £ — ' 

p<B 
P$S 

Proof. Since k > 1, there must be an i so that either \i has modulus bigger than 
4 or has modulus exactly 4 and all of the dij are 0. Without loss of generality, 
n is such an index. We split our sum into cases depending on whether p n > B. 
For p n > B, we proceed by fixing all of the pj for j n and summing over p n . 
Letting P — Y[i=i Pit we have 

N/B _^ 

E^ E a E X(P") 

P=l P=p 1 ...p n _ 1 B< Pn <N/P 
Pi distinct p n ^p^ 

(C,F)=1 

where a is some constant of norm 1 depending on pi .. .p„_i, and x is a non- 
trivial character of modulus dividing D, perhaps also depending on p\, . . . ,p n -i- 
The condition that p n ^ pj alters the value of the inner sum by at most n. With 
this condition removed, we may bound the inner sum by applying Lemma [12] 
(taking the difference of the terms with X = N/P and X = B). Hence the 
value of the inner sum is at most 0(NJ P\og~ c ~ 2 (M) + n). Since N/P >B> 
nlog c+2 (Af), this is just O (N/P log - (M) ) . Note that for each P, there are 
at most (n — 1)! ways of writing it as a product of n— 1 primes (since the primes 
will be unique up to ordering). Hence, ignoring the extra 1/n factor, the sum 
above is at most 

N/B 

0{N/P\og- c - 2 {M)) = 0{N\og(N)\og- c - 2 {M)). 

p=i 

For p n < B, we fix p n and consider the sum over the remaining pi. We note 
that for p a prime not in S and relatively prime to D, this sum is plus or minus 
one over n times a sum of the type bounded by Q (n — 1 , N/p, D , k — 1 , S U {p} ) . 
This completes our proof. □ 

We are now prepared to Prove Proposition [TT] 

Proof. We prove by induction on k that for n, N, D,C, M, (3, B as above with 

B > max( e ( c + 2 ^ lo s M , e K ^ c+2 ^^ D ^ ^ l °s(DM)f ( n log c+2 (M))> 
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and S a set of primes < B that 



0( „, W , C , fe ,5)<OI - 7 __ IO|^| (4) 



TV \ /loglogB xfe 



n 
fe-i 



log log _B 



+ 0(N log(N) log" c " 2 (Af )) ^ O 

a=0 

Plugging in M = N , k = m, S = 0, and 

B = max( e ( c + 2 )^ lo s ^ N , e K ( c + 2 ^^ D ^ ^ Ns(2W)) a ^ n log c+2 ^ 

yields the necessary result. 

We prove Equation @] by induction on fc. For fc — 0, the sum is at most the 
sum over b = p\ . . . p n with appropriate conditions of \ . Since each such b can 
be written as such a product on at most n! ways, this is at most U n (N), which 

by Corollary [7] is at most O ( ^i og Tog n ) as desired. 

For larger values of fc, we use the inductive hypothesis and Lemma 1131 to 
bound Q(n, N, D, fc, S) by 



0(N\og(N) \og~ c ~ 2 (M)) + - V Q(n - 1, JV/p, £>, fc - 1, S') 
<0(ATlog(iV) log" c_2 (M)) 



n 

p<B 



-ylol = ) o ( lo ^ BS k 1 

n^p {^/loglogN/pB- 1 ) 



n-1 

fc-2 



1 x: -o^iogwiog^-cAf))^:© ^ iogiogi?v 



n ^— ' n ' ^— ' V n — 1 

p<B ^ a=0 v 

<0(ATlog(iV) log- c ~ 2 (Af)) 

/ # \ ,-, /loglog.B x fc 



•O ; I O 

\^\og\ogN/B« 



n 



0(N\og(N)\og- c - 2 (M))J20 



fc— 2 / -, , j— j \ a+1 

' log log B N 



a=0 

fc 



yiogiogiv/s 

0(7Vl g(7V)log~ c - 2 (A/))^0 



n 

fc-1 



a=0 



log log B\ a 



Above we use that J2 p<B I - O(loglogB) and that ± (^ T )° - O ((i) a+1 

for a < n. This completes the inductive hypothesis, proving Equation [4] and 
completing the proof. □ 
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We are now prepared to prove Proposition 1101 



Proof. First note that we can assume that A\D. This is because if that is not 
the case, we can split our sum up into two cases, one where none of the pi are 
2, and one where one of the pi is 2. In either case we get a sum of the same 
form but now can assume that D is divisible by 4. We assume this so that we 
can use Proposition [TTJ 

It is clear that the difference between the left hand side of Equation [5] and 
the main term on the right hand side is 



1 

W\ 



( 



E 

X6G\{1} 



V 



\ 



-T E X(Pl)---)Pn) 



Pl,-y,Pn 
distinct primes 
(D,p«)=l 



E f(9)x(9) 



) 



Using Cauchy-Schwarz we find that this is at most 
/ 



|^l/| 2 



E 

xec\{i} 



V 



- y 



X(pi, ■ ■ ■ ,Pn) 



distinct primes 

(Ap*)=1 

TliPi<N 



2, 1/2 



We note that |/|2 < \/\G\ and hence that j^|-\/]G[|/|2 < 1- Bounding the 
character sum using Proposition [TT] (using the minimal possible value of B), we 

§ et ° (loIToilv) times 



E On 

xe<5\{i} 



log log log N 
log log N 



Where above s is the number of components on which \ (thought of as a product 
of characters of (Z/DZ) * ) is non-trivial. Since each component of \ can either be 
trivial or have one of finitely many non-trivial values (each of which contributes 
O D ( (log log log 7V) 2 /(log log TV) 2 )) and this can be chosen independently for each 
component, the inner sum is 



l + Oi 



log log log N s 
log log N 



1 = cxp Od 



(log log log N)' 



Or 



log log N 

(log log log N) 2 * 
log log N 
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Hence the total error is at most 

1 An\ fir\n I ( N 2 \og\og\og 2 (N) \ l/2 \ ( N logloglog(AQ 

Wl V\G\V\G\0 D U iogiQg2(iv) j )=°H loglog(TV) 



□ 



The proof of Proposition |9] is along the same lines as the proof of Proposition 
111! Again we induct on m. This time, we use Lemma [13] as our base case (when 
all of the eij are 0). If some e^j is non-zero, we break into cases based on 
whether or not pi and pj are larger than some integer A (which will be some 
power of \og(N)). If both, pi and pj are large, then fixing the remaining primes 
and summing over pi and Pj gives a relatively small result. Otherwise, fixing 
one of these primes at a small value, we are left with a sum of a similar form 
over the other primes. Unfortunately, doing this will increase our D by a factor 
of pi, and may introduce characters with bad Siegel zeroes. To counteract this, 
we will begin by throwing away all terms in our sum where D pj i pi is divisible 
by the modulus of the worst Siegel zero in some range, and use standard results 
to bound the badness of other Siegel zeroes. 

We begin with some Lemmas that will allow us to bound sums of Legendrc 
symbols of pi and pj as they vary over primes. 

Lemma 14. Let Q and N be positive integers with Q 2 > N. Let a be a function 
{1, 2, . . . , N} — > C, supported on square-free numbers. Then we have that 



E 



X quadratic character 
of modulus p or 4p 7 <Q 



N 
n=l 



o 



(Q^N\a\ 2 ) 



where the sum is over quadratic characters whose modulus is either a prime 
or four times a prime and is less than Q, and where \a\ 2 = 53n=l l a «| 2 * s ^ e 
squared L 2 norm. 

Note the similarity between this and Lemma 3 of [2]. 

Proof. Let M be a positive integer so that Q 2 < NM 2 < AQ 2 . Let b : 
{1, 2, . . . , M 2 } -4 C be the function b n 2 = jj and b = on non-squares. Let 
c = a * b be the multiplicative convolution of a and b. Note that since a is sup- 
ported on square-free numbers and b supported on squares that |c| 2 = |a| 2 |6| 2 = 
\a\ 2 /M. Applying the multiplicative large sieve inequality (see [?] Theorem 
7.13) to c we have that 



y— y 

q<Q rW X mod q 



<(Q 2 + 7VM 2 -l)|c| 2 . (5) 



The right hand side is easily seen to be 

0(Q 2 )\a\ 2 /M = 0{Q 2 \a\ 2 /{^jN)) = 0(Q^N\a\ 2 ). 
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For the left hand side we may note that it only becomes smaller if we remove 
the or ignore the characters that are not quadratic or do not have moduli 
either a prime or four times a prime. For such characters x note that 



anX( n ) 



\ n / n 



Xin)). 



Where the last equality above follows from the fact that y is 1 on squares not 
dividing its modulus, and noting that since its modulus divides four times a 
prime, the latter case only happens at even numbers of multiples of p. Hence 
the left hand side of Equation [5] is at least a constant multiple of 



E 



X quadratic character 
of modulus p or 4p, <Q 



N 

E 

71=1 



anX(n) 



This completes our proof. 

Lemma 15. Let A < X be positive numbers, and let a,b : Z 
so that \a(n)\, \ b(n)\ < 1 for all n. We have that 



□ 

be functions 



E a (Pi) & fe) 



A <Pl ,P2 
PlP2<X 



0(X\og{X)A- 1 / 8 ) 



Where the above sum is over pairs of primes pi bigger than A with p\pi < X, 
and where {^^j is the Legendre symbol. 



Proof. We first bound the sum of the terms for which p\ < y/X. 

We begin by partitioning [A, \/~X] into 0(A 1 ^ 4 log(X)) intervals of the form 
[Y,Y(1 + A^ 1 / 4 )). We break up our sum based on which of these intervals 
pi lies in. Once such an interval is fixed, we throw away the terms for which 
P2 > X/(Y(l + A" 1 / 4 )). We note that for such terms pip 2 > X(l + A -1 / 4 )^ 1 . 
Therefore the number of such terms in our original sum is at most 0(XA^ 1 ^ 4 ), 
and thus throwing these away introduces an error of at most 0{XA- 1 / A ). 

The sum of the remaining terms is at most 



E 

A< P 2<X/(Y(l+A-i/*)) 



E a ( pi ) 



Y<p 1 <Y(l+A- 1 / 4 ) 



By Cauchy-Schwarz, this is at most 
/ 



E 

\ A<p 2 <X/(y(l+A-V4)) 



E a ( pi ) 



y< Pl <y(i+A- 1 /4) 



1/2 
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In the evaluation of the above, we may restrict the support of a to primes 
between Y and Y(l + A -1 / 4 ). Therefore, by Lemma [Ml the above is at most 



^/xjYO [j{X/Y)Y l / 2 {YA- l / i )^ = O (XY^^A- 1 /^ 



0(XA 



-3/81 



Hence summing over the 0(A 1 ^ 4 log(X)) such intervals, we get a total contri- 
bution of 0{X log(X)A- 1 / 8 ). 

We get a similar bound on the sum of terms for which p2 < \[X. Finally we 
need to subtract off the sum of terms where both p\ and P2 are at most \[X. 
This is 



E 



E 



a(Pi)HP2) 



A< Pl <VX A<p 2 <VX 



This is at most 



E 

A<p 2 <Vx 



E 



a(pi) 



A< Pl <Vx 

By Cauchy-Schwarz and Lemma [Til this is at most 

\Zxv*o (yx^xv^xvA = 0(X 7 ' 8 ) = OiXA- 1 / 8 ). 

Hence all of our relevant factors are 0(X\og(X)A-^ 8 ), thus proving our 
bound. □ 

As mentioned above, in proving Proposition [HI we are going to want to deal 
separately with the terms in which D YiiPi is divisible by a particular bad Siegel 
zero. In particular, for X < Y, let q(X, Y) be the modulus of the Dirichlet 
character with the worst (closest to 1) Siegel zero of any Dirichlet character 
with modulus between X and Y. In analogy with the Q defined in the proof 
of Proposition [TTl for integers n, N, D, k, X, Y and a set S of primes, we define 
Q(n, N, D, k, X, Y, S) to be the largest possible value of 



n 



pj 



(G) 



h e n^nc- 1 )^ 6 ^ 

' Pl,—,Pn i i<j 

distinct primes 

q(X,Y)[DYl iPi 

(£>,P<)=1 
YliPi<N 

where \i are Dirichlet characters of modulus dividing D 7 eij,dij € {0, 1}, and 
k is at most the number of indices i so that one of: 



1 for some j or 
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• Xi has modulus not dividing 4 or 

• Xi has modulus exactly 4 and dij = for all j. 

We wish to prove an inductive bound on Q. In particular we show: 

Lemma 16. Let n, N, D, k, X, Y be as above. Let {3 be a real number so that the 
worst Siegel zero of a Dirichlet series of modulus at most D other than q(X, Y) 
is at most 1 — /3 _1 . Let M,A,B,C be integers so that 

B>max( e ( c + 2 )^ s lo s M , e /f ( c + 2 ) 2 ( lo s D ) 2 ( lo s lo ^ DM )) 2 ,rilog c+2 (M),A) 

for a sufficiently large constant K. Then for S a set of primes < A, we have 
that Q(n, N, D, k, X, Y, S) is at most the maximum of 

N (o (i^) fe + 0(l 0gW log-- 2 (M))g (^^) a ) 

and 

0(N log 2 {N) A' 1 /*) + -Y Q( n - l,N/p, Dp, k - 1, X, Y, S U {p}) 

p<A 

+ , 1 V Q(n-2,N/p lP 2,Dp lP2 ,k-2,X,Y,SU{ PuP2 }). 
n(n — 1 ^— ' , 

V ' Pl,P2<A 

Proof. We consider a sum of the form given in Equation |6l If all of the e<j are 
0, we have a form of the type handled in the proof of Proposition [TTJ and our 
sum is bounded by the first of our two expressions by Equation 01 

Otherwise, some eij is 1. Without loss of generality, this is e„_i jra . We can 
also assume that d n —i tn = since adding or removing the appropriate term 
is equivalent the reversing the Legendre symbol. We split our sum into parts 
based on which of p n -i,p n are at least A. In particular we take the sum of 
terms with both at least A, plus the sum of terms where p n -i < A plus the sum 
of terms with p n < A minus the sum of terms with both less than A. 

First consider the case where %> n —\,p n > A. First fixing the values of 
Pl, . . . ,p n -2, and letting P = Yl7=i Pi' we consider the remaining sum over 
Pn—l and p n . We have 

A<p n -l,Pn 

(pi,DP) = l 
Q\£>P Pn - lPn 

Pn-lPn<N/P 

Where a,b are some functions Z — > C so that |a(x)|, \b(x)\ < 1 for all x. We 
note that the condition that (j>i,DP) — 1 can be expressed by setting a and 
b equal to for some appropriate set of primes. We note that the condition 
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that q(X, Y) not divide DPp n -ip n is only relevant if DP is missing only one or 
two primes of q{X,Y). In the former case, it is equivalent to making one more 
value illegal for the pi. In the latter case it eliminates at most two terms. The 
condition that the pi are distinct removes at most y/N/P terms from our sum. 
Therefore, perhaps after setting a and b to on some set of primes, the above 
is 

( .\ 



±1 



Pn-l 



. A<p„_i,p„ x . 

V p n . lPn <N/P j 



By Lemma [151 this is at most 

1 



— 0(N/Plog(N)A- L/ *). 



n 



Now for each P < N, it can be written in at most (n — 2)! ways, hence the sum 
over all p„-i,p n > A is at most 



A' 



0{N/P\og(N)A-^ 8 ) = 0{N log 2 (TV) A" 1 / 8 ). 

p=i 

Next for the case where p n < A. We deal with this case by setting p n to 
each possible value of size at most A individually. It is easy to check that after 
setting p n to such a value p, the sum over the remaining pi is 1/n times a sum 
of the form bounded by Q(n — 1,N, Dp, k — 1, X, Y, S U {p})- Hence the sum 
over all terms with p n < A is at most 

- V Q(n - 1, N/p, Dp, k-l,X,Y,SU {p}). 

p<A 

The sum of the terms with p n -\ < A has the same bound, and the sum of 
terms with both less than A is similarly seen to be at most 

, 1 Y\ Q(n-2,N/ Pl p 2 ,Dp lP2 ,k-2,X,Y,SU{p 1 ,p 2 }). 
n(n — 1 ^— ' 

P1,P2<A 

□ 

We use this to prove an inductive bound on Q 

Lemma 17. Let n, N, D, k, X, Y, S, M, A, B, C, fj be as above. Assume further- 
more that Y > DA n , 

B > max( e ( c+2 ^ l °s ^ M , e *(c+2) 2 (iog ^) 2 (iog log(rM)) 2 ^ „ bg c+2 (M) ^ A) ^ 
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and that S contains only elements of size at most A. Let L = n — k, then 
Q{n 1 N, D, k, X, Y, S) is at most 



N O 



loglog£? x k 



+ O (log\N)A-^ + log(AT) log- c - 2 (M)) £ f l ^}£SB\ ' \ . 

a=0 ^ ' ) 

Note that we will wish to apply this Lemma with n about log log TV, D a 
constant, A polylog N, X polylog N, M = N, Y = DA n , and B its minimum 
possible value. 

Proof. We proceed by induction on fc, using Lemma 1 1 61 to bound Q. Our base 
case is when Q(n, N, D, k, X, Y, S) is bounded by 

N (o ( l0glOgi? ) fc + 0(logWlog- c - 2 (Af))X:O^ 0glOSi? " N 

(which must happen if k = 0). In this case, our bound clearly holds. 
Otherwise, Q(n, N, D, k, X, Y, S) is bounded by 

0(N log 2 (N)A- 1 ^) + 2 J2 ®( n ~ W?' D ^ k—l,X,Y,SU {p}) 

p<A 

+ , 1 T , V Q{n-2,N/ Pl p 2 ,Dp lP2 ,k-2,X,Y,Su{p u p 2 }). 
nln — 1) ^— ' . 

Notice that the parameters of Q in the above also satisfy our hypothesis, so 
we may bound them inductively. Note also that for the above values of Q that 
the value of L is the same. Letting U and E be sufficiently large multiples of 

losl ° sg and (\og 2 (N)A- 1 / s + log(JV) log" c " 2 (M)) , the above is easily seen to 

be at most 

n(^e + u ^o(u) k - 1 + E J2 °( u ) a ^j + u 2 (o{u) k - 2 + E J2 °( u ) a ^j j ■ 

Suppose that we wish to prove our final statement where the 0(U) terms hide 
a constant of Z. By the above, we could complete the inductive step if we could 
show that 

/ fc-2 \ / fc-3 \ 

E + ui (ZUf- 1 + E^2(ZU) a +U 2 (ZU) k - 2 + Ej2(ZU) a 

\ a=0 J \ a=0 J 

was at most 

fc-i 

{ZU) k + EY J (ZU) a . 



a=0 
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On the other hand, by comparing terms, this follows trivially as long as Z > 2. 
This completes our inductive step and proves our Lemma. □ 

We are finally prepared to prove Proposition [9l 

Proof. The basic idea will be to compare the sum in question to the quantity 
Q(n, N, D,k, X, Y, 0) for appropriate settings of the parameters. We begin by 
fixing the constant c in the Proposition statement. We let C be a constant 
large enough that c™ > \og c (N) (recall that n was 0(loglog N)). We set A to 
log 8C+16 (iV), X to log C (N) and Y to DA n = exp(0 D {C(\oglogN) 2 )). We let 
M = N. 

We note that f3 comes from either the worst Siegel zero of modulus less that 
X, or the second worst Siegel zero of modulus less than Y. By Theorem 5.28 
of [?], f3 is at most O e (X e ) in the former case, and at most 0(log(F)) in the 
latter case. Hence (changing e by a factor of C), we have unconditionally, that 
/3 = O e (log e {N)) for any e > 0. We next let 

B = max(e( c+2 ^ lo s ^ M , e K ( c+2 > 2 ^ M^)) a , „ l og c + 2 (M) , A) . 

Hence for sufficiently large N (in terms of epsilon and D), 

log log B < e log log TV. 

Finally we pick k so that n/2 > k > m/2. Thus L = n — k > n/2 = 
(log log AT). Noting that we satisfy the hypothesis of Lemma [TBI we have that 
for N sufficiently large relative to e and D that Q(n, N, D, k, X, Y, 0) is at most 

N ^O(e)'"/ 2 + (log 2 (7V)log- c - 2 (7V) +log(iV)log- c - 1 (7V)) J2°( e ) a J ■ 

If e is small enough that the term 0(e) is at most 1/2, this is at most 

N (o(e) m/2 + log- c (A0) ■ 
If additionally the 0(e) term is less than c 2 , this is 

0(Nc m ). 

Hence for N sufficiently large relative to c and D, 

Q(n,N,D,k,X,Y,(d) = 0(Nc m ). 

Therefore unequivocally, 

Q(n, N, D, k, X, Y, 0) = O c , D {Nc m ). 

Finally, we note that the difference between Q(n, N, D, k, X, Y, 0) and the 
term that we are trying to bound is exactly the sum over such terms where 
pi ■ ■ ■ p n is divisible by gcrf( ^'P ) D) . Since q(X, Y) > X, there are only D (N log 
such products. Since each product can be obtained in at most n\ ways, each 
contributing at most this difference is at most Od{N log~ c (N)) = 0(Nc m ). 
Therefore the thing we wish to bound is Ci rj(Nc m ). □ 
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4 Average Sizes of Selmer Groups 



Here we use the results from the previous section to prove the following Propo- 
sition: 

Proposition 18. Let E be an elliptic curve as described above (full two torsion 
defined over Q, no cyclic J^-isogeny defined over Q). Let S be a finite set of 
places containing 2,oo and all of the places where E has bad reduction. Let x be 
either —1 or a power of 2. Let w(m) denote the number of prime factors of m. 
Say that (m, S) = 1 if m is an integer not divisible by any of the finite places in 
S. For positive integers N, let Sn denote the set of integers b < N squarefree 
with \u>(b) - loglog7V| < (log log TV) 3 / 4 , and (b,S) = 1. Then 



dim(S 2 (£b)) 



lim - : = V x n a 



JV->oo \Sn 



This says that the k th moment of \S2(Et)\ averaged over b < N with \ui(b) — 
log log N | < (log log TV) 3 / 4 is what you would expect it to be by Theorem [2] and 
that averaged over the same 6's that the rank of the Selmer group is odd half of 
the time. The latter part of the Proposition follows from Lemma [TJ which we 
prove now: 

Proof of Lemma\^ First we replace E by a twist so that Cj — Cj are pair- 
wise relatively prime integers. It is now the case that E has everywhere good 
or multiplicative reduction, and we are now concerned with dim^S^-E^t,)) for 
some constant d\D. By [5] Theorem 2.3, and [4] Corollary 1 we have that 
dim(S 2 (E bd )) = dim(S 2 (£)j (mod 2) if and only if (-l) x Xbd(~N) = 1 where 
x = uj{d), N is the product of the primes not dividing d at which E has bad 
reduction, and Xbd is the quadratic character corresponding to the extension 
Q(y/bd). From this, the Lemma follows immediately. □ 

In order to prove the rest of Proposition [151 we will need a concrete descrip- 
tion of the Selmer groups of twists of E. We follow the treatment given in [6]. 
Let b — pi ■ ■ ■ p n where pi are distinct primes relatively prime to S (we leave 
which primes unspecified for now). Let B — S U {p%, ...,p n }. For v G B let V v 
be the subspace of (u%, u 2 , u 3 ) e (Q^/(Qt) 2 ) 3 so tnat = 1. Note that V v 

has a symplectic form given by (ui, 112,113) ■ (^1,^2,^3) = ni=i( M «i v i)v, where 
(ui,Vi) v is the Hilbert Symbol. Let V — YiveB V" ^ e a symplectic F2-vector 
space of dimension 2M. 

There are two important Lagrangian subspaces of V. The first, which we 
call U, is the image in V of (Z* B / (Z* B ) 2 )l . The other, which we call W, is given 
as the product of W v over v £ B, where W v consists of points of the form 
(x — bc\,x— bc 2 ,x — bc 3 ) for (x, y) £ E^. Note that we can write W = Ws X Wb 
where Ws = fives and Wb = Y\ u \ b The Selmer group is given by 

s 2 (E b ) = unw. 
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Let V be the F2-vector space generated by the symbols u, v' for v € 5 
and Pi,p[ for 1 < i < n. There is an isomorphism / : U' — > U given by 
/(oo) = (-1, -1, l),/(oo') = (l,-l,-l),/(p) = (p,p,l)J(p>) = (l,p,p). 

Note also that W Pi is generated by ((ci — C2)(ci — C3), 6(ci — C2), 6(ci — c 3 )) 
and (6(c 3 — ci), 6(c 3 — C2), (03 — ci)(c 3 — c 2 )). If we define W to be the F 2 -vector 
space generated by the symbols Pi,p[ for 1 < i < n, then there is an isomorphism 
g : W W 6 given by g(pi) = ((ci - c 2 )(ci - c 3 ), 6(ci - c 2 ), 6(ci - c 3 )) € W Pj 
and g{p[) = (6(c 3 - ci),&(c 3 - c 2 ), (c 3 - ci)(c 3 - c 2 )) € W Pi . 

Let G = Iliyes\oo °t/(°t) 2 (here 0* are the units in the ring of integers of 
k v ). Note that if b is positive, Ws is determined by the restriction of b to G. 
So for c e G let Vy s , c be W s for such 6. Let W' c = W s , c X W. Then we have 
a natural map g c : W' c — > V that is an isomorphism between and W if b 
restricts to c. 

We are now ready to prove Proposition [TBI 

Proof. For x — ~1 this Proposition just says that the parity is odd half of 
the time, which follows from Lemma [U For x = 2 k this says something about 
the expected value of \S2(Eb)\ k . For x — 2 k we will show that for each n E 
(log log AT - (log log iV) 3 / 4 , log log N + (log log TV) 3 / 4 ) that 



b<N 

b squarc-frcc 
oj(b)— n 
(b,S)=l 



( 



E 



b<N 

b square-free 
w(b)=n 1 
\(b,S)=l ) 



E oi m {2 k ) m + S(n, N) \ +0 



E.k 



TV(logloglogiV) 2 
log log TV 



Where 8(n,N) is some function so that lim^v ->oo 8(n, N) = 0. Summing over 
n and noting that there are fi(iV) values of b < N square-free with \u>(b) — 
log log N I < (log log N) 3 / 4 , and (6,5) = 1 gives us our desired result. 

In order to do this we need to better understand |52(-E*)| = \U D W\. For 
v E V we have since U is Lagrangian of size 2 M , 



1 if v E U 1 - 
else 

'l if v e U 
else 
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Hence 



\s 2 (E b )\ = \unw\ 

= #{w G W : w G U} 



2 J 



2^ E nr 

_L £ (_!)/(«)•»(«) 

Fig 



(«;) 



X! x(M(-i) /(tl) ' 9cM - 



If we extend / and g c to f k : {U') k — > £/ fc , : (W^) fc — > V k , and extend the 
inner product on V to an inner product on V k , we have that 

1^)1* = ^^ E x(bc)(-lf^W. (7) 

«e((7') fe ,™e(w,!)' ,i 

Notice that once we fix values of c,x,u,w in Equation [7] the summand (when 
treated as a function of pi, . . . ,p n ) is of the same form as the "characters" 
studied in Section [3] 

We want to take the sum over all b < N square-free, ui(b) = n, (b, S) = 1, of 
\S2(Eb)\ k - If we let I? be 8 times the product of the finite odd primes in S, we 
note that each such b can be expressed exactly n\ ways as a product pi, . . . ,p n 
with pi distinct, (pi,D) = 1. Therefore this sum equals 

h E ^mW E 

distinct primes "V , , , 

(Z), Pi )=i ue([/') fc ,™e(wO fc 

Interchanging the order of summation gives us 
1 



2 kM \G\ k 



E ^ E (n**>V: 



r(«)-ff?(^) 



ce< ^'X^ , i- distinct primes 

Now the inner sum is exactly of the form studied in Proposition O 
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We first wish to bound the contribution from terms where this inner sum 
has terms of the form (^p^ji or m the terminology of Proposition [9] for which 
not all of the eij are 0. In order to do this, we will need to determine how many 
of these terms there are and how large their values of m are. Notice that terms 

of the form (j^j show up here when we are evaluating the Hilbert symbols of 

the form (p, b(c a - c b )) p , (p, b(c a - c b )) q , (q, b(c a - c b )) p , (q, b(c a - c b )) q and in no 
other places. 

Let Ui C U' be the subspace generated by pi = (pi,Pi, 1) and p\ = (l,pj,pi). 
For u £ U' let ui be its component in U{ in the obvious way. Let Wi C W 
be W Pi . For w £ W' c let Wi be its component in W%. Let Uq be the F 2 -vector 
space with formal generators p and p' . We have a natural isomorphism between 
Uq and Ui sending p to pi and p' to p^. We will hence often think of Ui as an 
element of Uq. Similarly let Wo be the F2-vector space with formal generators 
((ci-c 2 )(ci-c 3 ), 6(ci-c 2 ), &(ci-c 3 )) and (&(c 3 -ci), &(c 3 -c 2 ), (c 3 -ci)(c 3 -c 2 )). 
We similarly have natural isomorphisms between Wi and Wq and will often 
consider Wi as an element of Wo instead of Wi. 

Additionally, we have a bilinear form Uq x Wq — > F 2 defined by: 



p-((ci - c 2 )(ci - c 3 ), &(c x - c 2 ), b(a - c 3 )) 

= p' • (6(c 3 - ci), fe(c 3 - c 2 ), (c 3 - ci)(c 3 - c 2 )) 
= 1 

p'-((ci - c 2 )(ci - c 3 ), 6(ci - c 2 ), 6(ci - c 3 )) 

= P • (&(C3 - ci), 6(c 3 - c 2 ), (c 3 - ci)(c 3 - c 2 )) 
= 0. 



We notice that if u G U' and w £ W' c , then the exponent of that appears 

in (-X)fM-9c(v) ig ( Ui+tij .) . ( Wi + Wj ). Similarly if u £ {U') k ,w £ {W' c ) k , the 

exponent of {j^j that appears in (— l)/''( u )'fc ( lu ) is (u^ +ttj) • (wi +Wj), where 

it*, are thought of as elements of Uq and Wq . 

We define a symplectic form onT — UqX Wq by (u, w) ■ (vf, w') = u-w'+u'-w. 
Also define a quadratic form q on T by q(u, w) = u ■ w. We claim that given 
some set of ti = (ui, Wi)i e i £ T that (itj + Uj) ■ (wi + Wj) = for all pairs i,j £ I 
only if all of the (itj, Wi) lie in a translate of a Lagrangian subspace of T. First 
note that for t = (u,w),t' = (u',w') that (u+vf) ■ (w + w') = t ■ t' + q(t) + q(t'). 
We need to show that for all i, j, k £ I that (ti +tj) ■ (ti+tk) = 0. This is true 
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because 



(ti+ty-fa+tk) 

t{ * t% ~\~ i*i tfc -\- tj • t{ -\- tj • tk 
— t% ' tfc -\- tj • t{ -\- tj • tfc 

= U-t k + tj ■ U + tj ■ t k + 2q(ti) + 2q(tj) + 2q(t k ) 

= (U ■ tj + q(U) + q(tj)) + (U ■ t k + q(U) + q(t k )) + (t k ■ tj + q(t k ) + q(tj)) 
= 0. 

So suppose that we have some u S n™=i ^ anQl w e T\a=i j anQl suppose 
that we have a set of I indices in {1,2, ...,n}, which we call active indices, 

so that (— l)f has terms of the form (^^j om y if i,j are both active, 

and suppose furthermore that each active index shows up as either i or j in at 
least one such term. Let t.- L — (ui,uii) £ T. We claim that fj takes fewer than 
2 fe different values on non-active indices, i. We note that our notion of active 
indices is similar to the notion in [5] of linked indices. 

Since ti ■ tj + q(tj) + q(tj) = for any two non- active indices t% and tj, all of 
these must lie in a translate of some Lagrangian subspace of T. Therefore ti can 
take at most 2 k values on non-active indices. Suppose for sake of contradiction 
that all of these values are actually assumed by some non-active index. Then 
consider tj for j an active index. The ti for i either non-active or equal to j 
must similarly lie in a translate of a Lagrangian subspace. Since such a space is 
already determined by the non-active indices and since all elements of this affine 
subspace are already occupied, tj must equal ti for some non-active i. But this 
means that every tj is assumed by some non-active index which implies that no 

terms of the form (j^j survive, yielding a contradiction. 

Now consider the number of such u, w so that there are at most I active 
indices and so that at least one of these terms survive. Once we fix the values ti 
that are allowed to be taken by the non-active indices (which can only be done 
in finitely many ways), there are (™) ways to choose the active indices, at most 
2 k — 1 ways to pick U for each non-active index, and at most 2 2k ways for each 
active index. Hence the total number of such u,w with exactly I active indices 
is 

°(C0 (^rvf 

By Proposition [21 the value of the inner sum for such a (u, w) is at most 
Oem (N(2^ 2k ^ 1 ) e ) . Hence summing over all I > and recalling the 2~ Mk 
out front we get a contribution of at most 

N2- nk O E , k (j2 (i) (2" " IT'' (D) = N2~ nk O E , k ((2 k - 1/2)") 



NO E ,k{(l-2- k - 1 ) n ) 
NO E , k ((logiV)- 2 "^ 
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Therefore we may safely ignore all of the terms in which a (j^j shows up. 

This is our analogue of Lemma 6 in [2] . 

Notice that by the above analysis, that the number of remaining terms 
must be 0(2 Mk ). Additionally, for these terms we may apply Proposition [TU1 
Therefore because of the 2~ Mk factor out front we have that up to an error 
of Oe { ^° E \og\o^M ^ J that the sum over b = p\ ■ ■ -p n , square free, at most AT, 
relatively prime to D, of \S2{Eb)\ is the number of such b times the average 
over all possible values of pi € G, °f \S2(Eb)\ k - Furthermore, our work 

shows that this average is bounded in terms of k and E independently of n. 

On the other hand, recalling the notation from Theorem^ this average is 
just 

d 

Using the fact that this is bounded for k + 1 independently of n, we find that 
7Td(n) = Ofc ^;(2 _ ( fe+1 ^). In order to complete the proof of our Proposition, we 
need to show that 

lim yWn) - a d )2 kd = 0. 

n. — i-rxn ' * 



¥00 ' 

d 



But this follows from the fact that 



M») - a d)2 kd = E , k ( 2- d ) = E M2- X ) 

d>X \d>X ) 

and that nd{n) — > aa for all d by Theorem [3J 

□ 



5 From Sizes to Ranks 

In this Section, we turn PropositionlTSlinto a proof of Theorem[3J This Section is 
analogous to Section 8 of [2], although our techniques are significantly different. 
We begin by doing some computations with the c^. 
Note that 

Now nj=i(l — 2~i)~ 1 is the sum over partitions, P, into parts of size at most n 
of 2~l p L Equivalcntly, taking the transpose, it is the sum over partitions P with 
at most n parts of 2~l p L Multiplying by 2~( 2 ), we get the sum over partitions 
P with n distinct parts (possibly a part of size 0) of 2-l p L Therefore, we have 
that 

F(x) = £ a n x n - 



n=0 



n^ (i+2-^') 
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Since the x d+2 coefficient of F(x) is also the sum over partitions, P into exactly 
d distinct parts (perhaps one of which is 0) of 2— \P\ divided by Iljlo(l + 2~ J ). 
This implies in particular that X^^Lo a ™ ec l ua l s 1 as it should. 

Let Tjy be the set of square-free b < N with (b.D) = 1, and \uj(b) — 
loglogiV| < (log log iV) 3 / 4 . Let C d (N) be 

#{beT N : dim(S 2 (E b )) = d} 
\Tn\ 

Let C(N) = (C (N), Ct(N), . . .) e [0, If. TheoremEJis equivalent to showing 
that 

lim C(N) = (do, a%, . . .). 

Lemma 19. Suppose that some subsequence of the C(N) converges to some 
sequence ( fa, fa, . . .) G [0, If m the product topology. Let G(x) = *^2 n fax n . 
Then G(x) has infinite radius of convergence and F(x) = G(x) for x = — 1 or 
x equals a power of 2. Also fa = fa = 0. 

This Lemma says that if the C(N) have some limit that the naive attempt 
to compute moments of the Selmer groups from this limit would succeed. 

Proof. The last claim follows from the fact that since Eb has full 2-torsion, its 
2-Selmer group always has rank at least 2. Notice that ~}2 d C d (N)x d is equal 
to the average size of a; dlm ( S2 ^ £ ' 6 ^ over b < N square-free, relatively prime to 
D with \u(b) - log log N\ < (log log 3/4 • This has limit F(x) as N oo by 
Proposition 1 181 if x is —1 or a power of 2. In particular it is bounded. Therefore 
there exists an Rk so that 



}_^C d (N)2 kd < R k 



)kd 

d 

for all N. Therefore C d (N) < R k 2- kd for all d,N. Therefore fa < R k 2- kd . 
Therefore G has infinite radius of convergence. 

Furthermore if we pick a subsequence, iV, — > oo so that C d (Ni) — > fa for all 
d, we have that 

F(2 k ) = lim y^C d (Ni)2 dk 

d 



lim V C d (Ni)2 



d<X 




= lim > C d (JV<)2 <lfc + 0(ifc + i2 

>oo z — J 

d<X 



-X\ 



fa2 dk + 0(R k+1 2- 



lim y /3 d 2 dfc = F(2 k ). 



Pd^ T y^\i\ k +\^ A 

d<X 

So 

X-s-oo 
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Thus G(2 k ) = F(2 k ). For x = — 1 the argument is similar but comes from the 
cquidistribution of parity rather than expectation of size. □ 

Lemma 20. Suppose that G(x) = J2 n PnX n is a Taylor series with infinite 
radius of convergence. Suppose also that (3 n e [0, 1] for all n and that G(x) — 
F{x) for x equal to —I or a power of 2. Suppose also that flo = /?i =0. Then 
Pn = ctn for all n. 

Proof. First we wish to prove a bound on the size of the coefficients of G. Note 
that 

F (2 k ) = 22k ^S)t+2% 1] -.' = ^ + 2 *> = ° (2 2fc+fe(fe+1)/2 ) • 
Now 

2 nk !i n < G{2 k ) = F{2 k ) = O {2 2k+k{k+1 ^ 2 ^ . 

Therefore 

Setting k = n we find that 

p n = o (V" 2 / 2 + 5 "/ 2 ) = o (2-C 1 ")) . 

The same can be said for F. Now consider F — G. This is an entire function 
whose x n coefficient is bounded by O 

( 2 -(V)) 

. Furthermore F — G vanishes 
to order at least 2 at 0, and order at least f at -f and at powers of 2. The 
bounds on coefficients imply that 



|F(a;) - G(x)\ <o(^2 M"j • 



The terms in the above sum clearly decay rapidly for n on either side of log 2 (|x|). 
Hence 

\F(x) - G(x)\ = O ^2 (_log2(|:l;|)2+51oS2(|;r|)) ' /2+loS2(|;l:|)2 ^ 
= O ^2 (log2(|;r|)2+51oS2(|:i;|))/2 ^ . 
In particular F — G is a function of order less than 1. Hence it must equal 

cx 2+t n(i-x/ P ), 

where the product is over non-zero roots p of F — G, and t is some non- negative 
integer. On the other hand, Jensen's Theorem tells us that if C ^ the average 
value of \og 2 (\F — G\) on a circle of radius R is 

log 2 |C| + (2 + t)log 2 i?+ J2 lo g 2 (^/lpl)- 

\p\<R 
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Setting R = 2 k and noting the contributions from p = — 1 and p = V for j < k 
we have 



0(1) + 3fc + Y,(k - j) = 0(1) + 3k + 




k 2 + 7k k 2 + 5k 



3<k 



which is larger than \og 2 {\F — G\) can be at this radius. This provides a con- 
tradiction. □ 

We now prove Theorem |3] 

Proof. Suppose that C(N) does not have limit (a , a.\, . . .). Then there is some 
subsequence N t so that C(Ni) avoid some neighborhood of (otQ, a\, . . .). By 
compactness, C(Ni) must have some subsequence with a limit (/3 ,/3i, • • ■)• By 
Lemmas \W\ and [2U1 (ceo, a ii ■ ■ •) = {Po, Pi, ■ ■ •)■ This is a contradiction. 

Therefore limjv_ >00 C(N) = (ao, a\, . . .). Hence limTv^oo Cd(N) = ad for 
all d. The Theorem follows immediately from this and the fact the fraction of 
b < N square-free with (b,D) = 1 that have \w(b) - loglog7V| < (log log TV) 3 / 4 
approaches 1 as TV — > oo. □ 

It should be noted that our bounds on the rate of convergence in Theorem 
[3] are non-effective in two places. One is our treatment in this last Section. 
We assume that we do not have an appropriate limit and proceed to find a 
contradiction. This is not a serious obstacle and if techniques similar to those 
of [2] were used instead, it could be overcome. The more serious problem comes 
in our proof of Proposition [9j where we make use of non-effective bounds on 
the size of Siegel zeroes. This latter problem may well be fundamental to our 
approach. 
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